VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 8, 2009· Updated Jun 16, 2026

CVE-2008-5874

CVE-2008-5874

Description

Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS) for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php in the (1) com_allhotels or (2) com_5starhotels module. NOTE: some of these details are obtained from third party information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Joomlahbs/Com 5starhotels2 versions
    cpe:2.3:a:joomlahbs:com_5starhotels:_nil_:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:joomlahbs:com_5starhotels:_nil_:*:*:*:*:*:*:*
    • (no CPE)
  • Joomlahbs/Com Allhotels2 versions
    cpe:2.3:a:joomlahbs:com_allhotels:_nil_:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:joomlahbs:com_allhotels:_nil_:*:*:*:*:*:*:*
    • (no CPE)
  • Joomlahbs/Hotel Booking Reservation System2 versions
    cpe:2.3:a:joomlahbs:hotel_booking_reservation_system:_nil_:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:joomlahbs:hotel_booking_reservation_system:_nil_:*:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.